Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa
File:                     3137372e31312e35362e302f32322d3234203d3e20323634333831.roa (raw, json)
Hash identifier:          eHDJY8GBuglPlbjLF5rtG6hw280IlNaGr30EUGD3CXo=
Subject key identifier:   80:AC:83:A8:CD:0E:E8:D0:8D:27:A1:64:34:C3:E6:B1:98:E9:C1:97
Certificate issuer:       /CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
Certificate serial:       04D26B2D7C79CE01B91B791F0ED1DA8415524CCD
Authority key identifier: 91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa
Signing time:             Thu 04 Apr 2024 13:30:56 +0000
ROA not before:           Thu 04 Apr 2024 13:25:56 +0000
ROA not after:            Thu 03 Apr 2025 13:30:56 +0000
asID:                     264381
IP address blocks:        177.11.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl
                          rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 13:42:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d2:6b:2d:7c:79:ce:01:b9:1b:79:1f:0e:d1:da:84:15:52:4c:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91C18D88BD49D07FD42CF259DD3F33070A6BE869
        Validity
            Not Before: Apr  4 13:25:56 2024 GMT
            Not After : Apr  3 13:30:56 2025 GMT
        Subject: CN=80AC83A8CD0EE8D08D27A16434C3E6B198E9C197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a1:c8:81:d5:d9:3d:4f:b5:06:fe:81:ff:e8:
                    41:32:9c:52:b7:70:1b:4c:9f:fe:c5:bc:ae:3d:ff:
                    a0:72:4a:c1:fa:90:fe:f1:da:0f:90:dc:7a:49:06:
                    ef:7f:9b:56:8e:7d:bf:8a:64:1c:48:c6:c8:1a:00:
                    84:23:53:fc:06:aa:ea:b4:db:51:f2:19:f4:ae:12:
                    fa:91:1d:98:cc:5b:72:ef:46:ed:12:a4:55:52:aa:
                    61:97:34:18:85:84:65:e7:f5:4f:50:93:65:6d:31:
                    fe:10:15:0f:d2:e5:9d:28:bc:cf:e7:39:55:cb:36:
                    47:90:e0:db:41:81:62:c1:2c:b5:07:96:cb:f3:db:
                    81:05:1f:a6:77:fb:3b:a3:f5:cb:06:d5:f3:83:61:
                    08:d1:a9:06:10:9e:46:97:9f:5f:61:de:3b:b6:3c:
                    b8:13:d4:35:50:29:4a:97:29:49:b7:bf:c4:a7:2a:
                    db:dc:5d:bd:c8:c5:4c:9e:82:f4:4a:61:fe:b5:41:
                    cd:68:20:1d:a2:1b:fe:ac:eb:28:ac:c4:49:fa:62:
                    09:a8:f5:8c:b5:d1:65:fe:36:6c:ce:dd:a0:a4:24:
                    35:32:a2:9b:16:14:f6:9d:e9:94:81:1a:14:3c:60:
                    2d:9c:30:e0:bc:a5:4a:93:76:01:7f:a5:0e:3c:b8:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AC:83:A8:CD:0E:E8:D0:8D:27:A1:64:34:C3:E6:B1:98:E9:C1:97
            X509v3 Authority Key Identifier:
                keyid:91:C1:8D:88:BD:49:D0:7F:D4:2C:F2:59:DD:3F:33:07:0A:6B:E8:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91C18D88BD49D07FD42CF259DD3F33070A6BE869.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vy2RcViXpe2PXdx93YYLEhLLBq4pPdBKh9QY6b2Y6mg/1/3137372e31312e35362e302f32322d3234203d3e20323634333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.11.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c9:4f:9b:b1:d2:3e:4f:d5:7e:40:41:b4:a2:9c:ee:38:fa:
         ef:63:6c:91:29:52:e5:bd:91:81:72:25:ff:6b:a8:18:22:86:
         b6:1d:85:40:6d:33:17:b6:f5:94:35:79:3d:af:dc:0d:b1:82:
         28:e2:4e:28:a1:46:fe:3f:39:58:ca:1a:d9:ac:4c:d1:09:2d:
         09:14:6c:8e:a1:5f:53:71:70:71:12:bd:e5:9e:b1:37:2f:1f:
         7d:a4:30:a2:27:5d:28:31:00:67:fc:50:f7:31:23:51:9b:a1:
         82:f7:c8:5a:41:98:2f:f0:24:e8:4c:7a:4c:ef:b3:e5:59:c0:
         ca:e6:54:f7:18:38:8c:0f:e1:13:f4:d5:ea:ea:98:3e:79:d7:
         f1:4c:84:d5:26:3b:35:0c:6a:43:45:6c:49:37:5a:f1:99:21:
         25:c3:b0:29:be:18:64:26:63:c3:25:b7:2b:3f:cd:e9:79:a3:
         0f:50:3f:db:69:dc:7d:98:c3:2e:b5:75:79:38:12:5a:ec:d3:
         35:c7:04:24:40:b9:6d:ff:93:a6:9e:13:2a:3a:76:f6:51:fa:
         63:bd:aa:bb:b3:3e:da:c1:2a:1d:dc:41:73:f1:d9:7c:bd:e6:
         b7:ab:18:23:b7:79:7f:da:be:cf:cb:d6:09:17:d2:ba:94:e8:
         84:e3:e5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:39 2024 by rpki-client on console-ams.rpki-client.org